@_mabote_

AppSec researcher @SonarSource | Former pentester 🥾 | @mabote@infosec.exchange

Joined March 2019
  • Tweets269
  • Following88
  • Followers196
2Media
Expecting to struggle finding a gadget chain in WordPress Core during an assessment when devs suddenly decided to make it easy : fenrisk.com/publications/blo…
1
9
18
3,887
🔥 Unauthenticated RCE vulnerability in JetBrains TeamCity (CVE-2023-42793) 🔥 We just disclosed the technical details explaining how a vulnerable Request Interceptor and a few undocumented endpoints led to RCE on one of the most popular CI/CD servers: sonarsource.com/blog/teamcit…
Sonar Research
@Sonar_Research21 Sep 2023
⚠️ Unauthenticated RCE vulnerability in JetBrains TeamCity (CVE-2023-42793) ⚠️ Attackers could steal source code and poison build artifacts to launch supply chain attacks: sonarsource.com/blog/teamcit… #appsec #security #vulnerability
22
2
55
14,862
Zip-slipping to RCE via Auto-Reload: OpenRefine is prone to critical security vulnerability (CVE-2023-37476). Read more in our latest blog post: sonarsource.com/blog/openref… #security #vulnerability #appsec
9
39
4,697
RCE in Apache OpenMeetings due to SQL weak comparison, unexpected application state, and null-byte injection. Check out the technical details in our latest blog post: sonarsource.com/blog/a-twist… #appsec #security #vulnerability
24
66
10,230
We are excited to share that we have two entries in the running for the next Pwnie Awards 🐴✨ 👇
1
4
11
3,336
🥑 The Hazards of Technological Variety and Parallelism: An Avocado Nightmare, by Stefan Schiller (@scryh_)
2
1
6
3,140
Gaetan retweeted
scryh@scryh_13 Jul 2023
Super excited to present this at Hexacon! See you there :)
Hexacon@hexacon_fr13 Jul 2023
🥑 The Hazards of Technological Variety and Parallelism: An Avocado Nightmare, by Stefan Schiller (@scryh_)
1
5
448
Replying to @Sonar_Research
@Sonar_Research identified and linked two vulnerabilities, leading to one-click remote code execution (RCE) exploit in Pimcore. Check out this @SecurityWeek article for all the details: securityweek.com/pimcore-pla… #appsec #security #vulnerability

Pimcore Platform Flaws Exposed Users to Code Execution

Security researchers are warning that newly patched vulnerabilities in the Pimcore platform bring code execution risks.

securityweek.com
4
6
725
Sonar at @BlackHatEvents Asia! Look for us at Booth B20 for live demos with our solution! In addition, @Sonar_Research member Paul Gerste will host a presentation: "Stealing with Style: Using CSS to Exploit ProtonMail & Friends" on May 11, 11:20 am at Roselle Junior Ballroom!
2
1
13
15,011
What do we need content types for anyway? Let's look into how an incorrect content type led to a real-world vulnerability in the famous business suite Odoo, CVE-2023-1434 🐛 sonarsource.com/blog/odoo-ge… #appsec #python #cleancode
11
38
5,782
Windows authentication & Prox-Ez is the topic of the last Synacktiv talk at #THCon, staring @b1two_ and @YofBalibump
9
26
3,436
“Patches, collisions and root shells: a Pwn2Own adventure” will be presented by @scryh_, @pspaul95 & @[email protected] from team @Sonar_Research at #TyphoonCon23! Learn more and get your tickets today: typhooncon.com/blog/conitems…
10
30
32,528
🗡️ Argument Injection Vectors A curated list of exploitable options when dealing with argument injection bugs Capabilities: run a command, file write, file read, library load ➡️ chrome '--gpu-launcher="id>/tmp/foo" By @Sonar_Research #bugbountytips sonarsource.github.io/argume…
1
4
1,017
SNMP to RCE - Read about an XSS vulnerability we discovered in LibreNMS, which can be exploited by sending a spoofed SNMP trap and gain code execution via Blade templates: sonarsource.com/blog/it-s-a-… #appsec #security #vulnerability
40
121
20,790
A server monitoring software 🌡 named Supermicro SuperDoctor 5 has been encountered during an assessment. However, @bak_sec and @_mabote_ were not big fans of the web app UX and thought a root shell would be more suitable 🐚 ➡️ Read more about this RCE: synacktiv.com/sites/default/…
15
43
11,253
In no time, the mighty @elvanderb pwned his favorite target: XNU, the Apple MacOS kernel! Rumor has it that he took more time developing the ASCII art than the actual exploit 🥷 #P2OVancouver
TrendAI Zero Day Initiative
@thezdi22 Mar 2023
Success! @Synacktiv used a TOCTOU bug to escalate privileges on Apple macOS. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own #P2OVancouver
23
1
137
16,794
Did you enjoy the latest blogpost on PHP filter chains? Well, our ninja @_remsio_ strikes again with a new article detailing how you can abuse them to leak files from the targeted system, as well as a freshly developed tool to exploit it! synacktiv.com/publications/p…

PHP filter chains: file read from error-based oracle

PHP filter chains: file read from error-based oracle

synacktiv.com
2
67
4
144
26,142
Fishing for bugs in PHP apps be like
2
4
1
36
4,880
Gaetan retweeted
Szlam@szLam_15 Mar 2023
Replying to @MathisHammel @plhery
On en parlait déjà en 2016... Pas surpris de voir que ça continue 7 ans plus tard sur ce genre d'apps. youtube.com/watch?v=M7vdzgJZ…
1
1
6
589
A few months ago, we reported a pre-auth Remote Code Execution #RCE vulnerability to @vBulletin. The exploitation of this unserialize() bug was tricky, as vBulletin classes are not deserialisable. Discover the exploitation in our latest blogpost: ambionics.io/blog/vbulletin-…
2
83
3
198
49,909
Load more